CVE-2016-20090: Comodo Dragon Browser 52.15.25.663 Privilege Escalation via Unquoted Service Path
Comodo Dragon Browser versions up to 52.15.25.663 contain a privilege escalation vulnerability in the DragonUpdater service due to an unquoted service path running with SYSTEM privileges. A local attacker can insert a malicious executable in the service path and execute arbitrary code with elevated privileges upon service restart or system reboot.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Modify the DragonUpdater service configuration so the service executable path is quoted. Example approaches: use sc.exe (sc config DragonUpdater binPath= ""<full quoted path to DragonUpdater executable>""), or edit the ImagePath value under HKLM\SYSTEM\CurrentControlSet\Services\DragonUpdater to surround the full executable path with double quotes.
DragonUpdater service (Comodo Dragon Browser) service image path (ImagePath / binPath) = enclose the full path to the DragonUpdater executable in double quotes - Operational
Inspect the locations referenced by the DragonUpdater service path for any unauthorized or malicious executables placed by an attacker; remove or quarantine any such files, run a full AV/malware scan, and verify no malicious binaries remain. After cleanup, confirm the ImagePath is quoted and restart the service (or reboot) to ensure the fix is effective.
Event History
Frequently Asked Questions
What is the severity of CVE-2016-20090?
The severity of CVE-2016-20090 is rated high, with a score of 8.5.
How do I fix CVE-2016-20090?
To fix CVE-2016-20090, update the Comodo Dragon Browser to a version beyond 52.15.25.663.
What is the risk associated with CVE-2016-20090?
CVE-2016-20090 has a risk rating of 73, indicating a significant potential for exploitation.
What type of vulnerability is CVE-2016-20090?
CVE-2016-20090 is a privilege escalation vulnerability due to an unquoted service path.
Which service is affected by CVE-2016-20090?
The DragonUpdater service in Comodo Dragon Browser is affected by CVE-2016-20090.